93 matches found
CVE-2015-3783
CVE-2015-3783 concerns Apple OS X SceneKit prior to 10.10.5. A memory corruption issue exists in SceneKit that can be exploited by remote attackers to execute arbitrary code or cause a denial of service (application crash). Vectors are not specified in the provided description. The linked sources...
[KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability
-------------------------------------------------------------- Dotclear = 2.6.2 categories.php SQL Injection Vulnerability -------------------------------------------------------------- - Software Link: http://dotclear.org/ - Affected Versions: Version 2.6.2 and probably prior versions. -...
CVE-2014-3783
SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categoriesorder parameter...
CVE-2014-3783
Dotclear 2.6.2 and earlier suffer an SQL injection in admin/categories.php via the categories_order POST parameter. The vulnerability arises because input from $_POST['categories_order'] is not properly sanitized before being passed to dcBlog::updCategoryPosition, which calls nestedTree::updatePo...
Dotclear 2.6.2 SQL Injection
-------------------------------------------------------------- Dotclear itemid 76. $core-blog-updCategoryPosition$category-itemid, $category-left, $category-right; 77. 78. 79. 80. dcPage::addSuccessNotice'Categories have been successfully reordered.'; 81. http::redirect'categories.php'; 82. User...
[SECURITY] [DSA 2818-1] mysql-5.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2818-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 16, 2013 http://www.debian.org/security/faq -...
SuSE 11.3 Security Update : MySQL (SAT Patch Number 8217)
This version upgrade of mysql to 5.5.32 fixes multiple security issues : CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 / CVE-2013-3794 / CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 / CVE-2013-3801 / CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 / CVE-2013-3806 / CVE-2013-3807 / CVE-2013-3808 /...
Ubuntu Update for mysql-5.5 USN-1909-1
Check for the Version of mysql-5.5 OpenVAS Vulnerability Test $Id: gbubuntuUSN19091.nasl 8509 2018-01-24 06:57:46Z teissa $ Ubuntu Update for mysql-5.5 USN-1909-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
MySQL Unspecified vulnerability-06 (Jul 2013) - Windows
MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql"; ifdescription...
CVE-2013-3783
CVE-2013-3783 affects the MySQL Server component in Oracle MySQL 5.5.31 and earlier. The vulnerability is described as unspecified and allows remote authenticated users to affect availability via unknown vectors related to the Server Parser. Connected sources reference this CVE within broader Ora...
CVE-2013-3783
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser...
MySQL 5.5 < 5.5.32 Multiple Vulnerabilities
The version of MySQL 5.5.x installed on the remote host is prior to 5.5.32. It is, therefore, affected by multiple vulnerabilities in the following components : - Audit Log - Data Manipulation Language - Full Text Search - GIS - Server : Optimizer - Server : Parser - Server : Replication C Tenabl...
Oracle MySQL Server远程安全漏洞(CVE-2013-3783)
BUGTRAQ ID: 61210 CVECAN ID: CVE-2013-3783 Oracle MySQL Server是一个轻量的关系型数据库系统。 Oracle MySQL Server 5.5.31之前版本存在远程安全漏洞，此漏洞可通过MySQL协议利用，Server Parser子组件受到影响。远程攻击者可利用此漏洞造成拒绝服务。 0 MySQL Server = 5.5.31 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpujuly2013-1899826）以及相应补丁: cpujuly2013-1899826：Oracle...
CVE-2011-3783
phpMyFAQ 2.6.13 is affected by an information-disclosure vulnerability: remote attackers can obtain the installation path by requesting a PHP file directly, which outputs an error message revealing paths (e.g., lang/language_uk.php). The vulnerability is described in multiple sources; no fix/vers...
Slackware 13.1 / current : mozilla-thunderbird (SSA:2010-202-02)
New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-202-02. The text itself is...
CVE-2010-3783
Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors...
CVE-2010-3783
Summary: CVE-2010-3783 affects Password Server on Apple Mac OS X Server 10.5.8 and 10.6.x up to 10.6.4, where a replication handling issue can allow remote authenticated users to bypass current-password verification. What’s affected: Password Server’s replication process (unspecified vectors) may...
CVE-2009-3783
CVE-2009-3783 affects the Drupal module Simplenews Statistics (6.x) prior to 6.x-2.0. The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via an unspecified vector. The base CVSS v2 score is 4.3 (Medium) with no confidentiali...
